dsl_version: 0.4.0
service:
  name: glance-registry
  ports:
    - {{ glance.registry_port }}
  annotations:
    service:
      prometheus.io/probe: "true"
      prometheus.io/probe_path: "/healthcheck"
  containers:
    - name: glance-registry
      image: glance-registry
      daemon:
        files:
          - glance-registry-conf
          # {% if security.tls.enabled %}
          - ca_cert_client
          # {% endif %}
        dependencies:
          - glance-api
        command: glance-registry
    # {% if security.tls.enabled %}
    - name: nginx
      image: nginx
      daemon:
        files:
          - upstreams
          - servers
          - server-cert
          - server-key
        command: nginx
    # {% endif %}

files:
  glance-registry-conf:
    path: /etc/glance/glance-registry.conf
    content: glance-registry.conf.j2
  # {% if security.tls.enabled %}
  ca_cert_client:
    path: /etc/glance/certs/ca-cert.pem
    content: ca-cert.pem.j2
  upstreams:
    path: /etc/nginx/conf.d/upstreams.conf
    content: upstreams.conf.j2
    perm: "0400"
  servers:
    path: /etc/nginx/conf.d/servers.conf
    content: nginx-registry.conf.j2
    perm: "0400"
  server-cert:
    path: /etc/nginx/ssl/certs/server-cert.pem
    content: server-cert.pem.j2
    perm: "0400"
  server-key:
    path: /etc/nginx/ssl/private/server-key.pem
    content: server-key.pem.j2
    perm: "0400"
  # {% endif %}